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TRANSMITTAL OF SUBSTITUTE APPEAL BRIEF 
(PATENT APPLICATION— 37 C.F.R. § 4137) 

1. This brief is in furtherance of the Notice of Appeal filed 02/03/2006, a substitute for the Appeal 
Brief filed 04/03/2006, and in response to the Notification of Non-Compliant Appeal Brief mailed 
on 08/03/2006. 



2. STATUS OF APPLICANT 



This application is on behalf of other than a small entity. 
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3. FEE FOR FILING APPEAL BRIEF 

Pursuant to 37 C.F.R. §1.17(0), the fee for filing the Appeal Brief has already been paid. However, 
the Commissioner 4s authorised to charge any fees that may be due to deposit account 50-1351 
(NAI1P092). 

4. EXTENSION OF TERM 

The proceedings herein are for a patent application and the provisions of 37 C.F.R. § 1.136 apply. 

Applicants) hereby petition for a Two Month extension of time to respond; however, if it is 
determined that an additional extension is required, Applicants) hereby petition that such an 
extension be granted and authorize the Commissioner to charge the required fees for an Extension 
of Time under 37 CFR 1 .136 to Deposit Account No. 50-1351 (Order No. NAI1P092), 

5. TOTAL FEE DUE 

The total fee due is: 

Appeal brief fee $0.00 (previously paid on April 3, 2006) 
Extension of time $450.00 
Total Fee Due $450.00 

6. FEE PAYMENT 

Applicant believes that only the above fees are due in connection with the fi ling of this paper 
because the appeal brief fee was paid with a previous submission. However, the Commissioner is 
authorized to charge any additional fees that may be due (e.g. for any reason including, but not 
limited to fee changes, etc.) to deposit account 50-1351 (Order No. NAI1P092). 

7. FEE DEFICIENCY 

If any additional extension and/or fee is required, and if any additional fee for claims is required, 
charge Deposit Account No. 50-1351 (Order No. NAI1P092). 

A duplicate of this transmittal is attached. 
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TeL No.: 40&-971-2573 Zaka*-Kotab, PC 

Customer No.: 28875 /P.O. Box 721 120 

San Jose, CA 95172-1120 
USA 
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PATENT 

IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 
In re application of: 
Green et al. 

Application No. 09/935,634 
Filed: 08/24/2001 

For: SYSTEMS AND METHODS FOR 
CONVERTING INFECTED ELECTRO] 
FILES TO A SAFE FORMAT 



Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

ATTENTION: Board of Patent Appeals and Interferences 

SUBSTITUTE APPEAL BRIEF (37 C.FJL § 41.37) 

This brief is in furtherance of the Notice of Appeal filed 02/03/2006, a substitute for the Appeal 
Brief filed 04/03/2006, and in response to the Notification of Non-Compliant Appeal Brief 
mailed on 08/03/2006 (see attached). While appellant disagrees with the Examiner as to whether 
the alleged deficiencies exist in the original Appeal Brief, a Substitute Appeal Brief with 
appropriate edits is nevertheless submitted to expedite prosecution. 

The fees required under § 1 . 17, and any required petition for extension of time for filing this brief 
and fees therefor, are dealt with in the accompanying TRANSMITTAL OF APPEAL BRIEF. 

This brief contains these items under the following headings, and in the order set forth below (37 
C.F.R.§ 41. 37(c)(i)): 

I REAL PARTY IN INTEREST 

n RELATED APPEALS AND INTERFERENCES 

m STATUS OF CLAIMS 



Group Art Unit: 2142 
Examiner: Lin, Kelvin Y. 
Date: October 4 3 2006 
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IV STATUS OF AMENDMENTS 

V SUMMARY OF CLAIMED SUBJECT MATTER 

VI GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

VII ARGUMENT 

VIH CLAIMS APPENDIX 

IX EVIDENCE APPENDIX 

X RELATED PROCEEDING APPENDIX 

The final page of this brief bears the practitioner's signature. 
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I REAL PARTY IN INTEREST (37 C.FJL § 41.37(c)(l)(0) 

The real party in interest in this appeal is McAfee, Inc. 
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H RELATED APPEALS AND INTERFERENCES (37 C.F.R- § 41.37(c) (X)(ii)) 

With respect to other prior or pending appeals, interferences, or related judicial proceedings that 
will directly affect, or be directly affected by, or have a bearing on the Board's decision in the 
pending appeal, an appeal noted on 06/28/2006 in application serial number 09/935,635 may be, 
but is not necessarily, related. 

Since no decisions) has been rendered in such proceeding^), no Related Proceedings Appendix is 
appended hereto. 
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m STATUS OF CLAIMS (37 C.F.R § 41.37(c) (l)(iii)) 

A. TOTAL NUMBER OF CLAIMS IN APPLICATION 
Claims in the application are: 1-10, 12-30 and 32-40 

B. STATUS OF ALL THE CLAIMS IN APPLICATION 

1 . Claims withdrawn from consideration: None 

2. Claims pending: 1-10, 12-30 and 32-40 

3. Claims allowed: None 

4. Claims rejected: 1-10, 12-30 and 32-40 

5. Claims cancelled: 1 1 and 31 

C. CLAIMS ON APPEAL 

The claims on appeal are: 1-10, 12-30 and 32-40 

See additional status information in the Appendix of Claims. 
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IV STATUS OF AMENDMENTS (37 § 41 J7(c)(l)(iv)) 

As to the status of any amendment filed subsequent to final rejection, there are no such amendments 
after final. 
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V SUMMARY OF CLAIMED SUBJECT MATTER (37 CF.R- § 41.37(c)(l)(v)) 

With respect to a summary of Claim 1, as shown in Figures 1 and 2, a method carried out by a 
computer executing computer-readable program code comprises receiving a certain electronic 
file intended for delivery from a sender to an intended recipient (e.g. see item 202 of Figure 2, 
etc.) where the certain electronic file has a first file format with a first file extension and contains 
a computer virus. See, for example, paragraph 0017, et al. Prior to the certain electronic file 
being made available for viewing by the intended recipient (e.g. see item 206 of Figure 2, etc.), 
the certain electronic file is converted to a second file format having a second file extension that 
is different from the first file extension of the first file format (e.g. see item 204 of Figure 2, etc.) 
which prevents the computer virus from executing when the converted electronic file is opened 
by the intended recipient (e.g. see item 208 of Figure 2, etc.). See, for example, paragraph 0017, 
et al. The certain electronic file is converted in response to a determination that the certain 
electronic file represents at least the potential risk to the security of the computer system. See, 
for example, paragraph 0023, et al. 

With respect to a summary of Claim 24, as shown in Figures 1 and 2, a method for implementing 
a security policy comprises determining whether an electronic file represents at least a potential 
risk to security of a computer system. See, for example, paragraph 0023, et al- Prior to making 
the electronic file available to an intended recipient of the electronic file (e g. see item 206 of 
Figure 2, etc.), the electronic file is converted into a safe format having a safe file extension that 
ensures that a computer virus in the electronic file is unable to harm the computer system (e.g. 
see item 204 of Figure 2, etc). The electronic file is converted in response to the determination 
that the electronic file represents at least the potential risk to the security of the computer system. 
See, for example, paragraph 0023, et al. 

With respect to a summary of Claim 28, as shown in Figures 1 and 2, a computer-readable 
medium has instructions stored thereon, which, when executed by a computer, cause the 
computer to convert a certain electronic file, intended for delivery from a sender to an intended 
recipient (e.g. see item 200 of Figure 2, etc.), from a first file format having a first file extension 
to a second file format having a second file extension (e-g. see item 204 of Figure 2, etc). See, 
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for example, paragraph 0017, et al. The converting is prior to the certain electronic file being 
made available for viewing by the intended recipient (e.g. see item 206 of Figure 2, etc.). The 
second file format with the second file extension is different from the first file format with the 
first file extension, and a computer virus in the certain electronic file is prevented from executing 
when the converted electronic file is opened by the intended recipient (e.g. see item 208 of 
Figured etc.). See, for example, paragraph 0017, et al. The certain electronic file is converted 
in response to a determination that the certain electronic file represents at least the potential risk 
to the security of the computer system. See, for example, paragraph 0023, et al. 

With respect to a summary of Claim 36, as shown in Figures 1 and 2, a computer has means for 
receiving a certain electronic file (e.g. see item 202 of Figure 2, etc.) intended for delivery from 
a sender to a intended recipient (e.g. see item 200 of Figure 2, etc.). The certain electronic file 
is a first file format with a first file extension and contains a computer virus. See, for example, 
paragraph 0017, et al. Further, prior to the certain electronic file being made available for 
viewing by the intended recipient (e.g. see item 206 of Figure 2, etc.), the computer includes 
means for converting the certain electronic file from the first file format with the first file 
extension to a second file format having a second file extension that is different from the first 
file format with the first file extension (e.g. see item 204 of Figure 2, etc.) which prevents the 
computer virus from executing when the converted electronic file is opened by the intended 
recipient (e.g. see item 208 of Figure 2, etc.). See, for example, paragraph 0017, et aL The 
certain electronic file is converted in response to a determination that the certain electronic file 
represents at least the potential risk to the security of the computer system. See, for example, 
paragraph 0023, et al. 
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VI GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL (37 C.F.R. § 
41.37(c)(l)(vi)) 

Following, under each issue listed, is a coficise statement setting forth the corresponding ground of 
rejection. 

Issue # 1: The Examiner has rejected Claims 1-10, 12-14, 16 3 18-30, 32-33 and 35-40 under 35 
U.S.C. 102(b) as being anticipated by Ji et al. (U.S. Patent No. 5,889,943). 

Issue # 2: The Examiner has rejected Claims 15 and 34 under 35 U.S.C. 103(a) as being 
unpatentable over Ji et al. (US. Patent No. 5,889,943), in view of Chen (U.S. Patent No. 5,960,170). 

Issue # 3; The Examiner has rejected Claim 17 under 35 U.S.C. 103(a) as being unpatentable over Ji 
et al. (U.S. Patent No. 5,889,943), in view of Chen (U.S. Patent No. 5,960,170), in further view of 
Maloney et al. (U.S. Patent No. 6,549,208). 
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Vn ARGUMENT (37 CFJt- § 41,37(c)(l)(vu)) 

The claims of the groups noted below do not stand or fall together. In the present section, appellant 
explains why the claims of each group are believed to be separately patentable. 

Issue # 1; 

The Examiner has rejected Claims 1-10, 12-14, 16, 18-30, 32-33 and 35-40 under 35 U.S.C. 102(b) 
as being anticipated by Ji et aL (U.S. Patent No. 5,889,943), 

Group #2; Claims 1-6, 8-10, 12, 13, 19-21, 23-30, 32-33 and 35-40 

With respect to independent Claims 1, 24, 28 and 36, the Examiner has relied on the following 
excerpt from Ji to make a prior art showing of appellant's claimed "prior to the certain electronic 
file being made available for viewing by the intended recipient, converting the certain electronic 
file to a second file format having a second file extension that is different from the first file 
extension of the first file format and that prevents the computer virus from executing when the 
converted electronic file is Opened by the intended recipient" (see this Or similar, but not 
identical, language in each of the foregoing claims). 

*-.the mail sending module 2 SI may be used to forward messages or 
attachments to parties such as the sender and recipient of the treated 
message or the network administrator ,* (Col. 19, line 1-4) 

In the Advisory Action dated 1/17/2006, the Examiner has responded to appellant's arguments 
by stating that Col. 8, lines 59-67 and Col. 9, lines 35-44 in "Ji clearly teaches checking the 
extension of the file name which including txt, brnd, pox, and gi$ that files are no likely to 
contain viruses, while exe, zip and com extension files are of the type that often contain viruses." 
The Examiner has concluded that "Ji discloses procedures (fig. 6B, step 6l0-612,or 610- 628) 
that prior to transferring the electronic file, there are steps to determine whether the file contains 
virus, then based on the user's configuration to rename the file." The Examiner has further 
argued that "the rename file not only can change the name, [but] it can also change the file 
extension" and that "[i]t is well known skill in the art of the computer field." Still yet, the 
Examiner as argued that "Ji teaches the option for users to specify in the configuration file to 
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prevent the vims from making damage before recipient open the file" and that thus "the virus- 
free extension is the target name." 

Fiist> appellant respectfully asserts that, in Ji, the file extension is only utilized to determine 
whether the file is of a type that can contain viruses, such that if the file is not of the type to 
contain viruses, then the file is transferred to the recipient (see Figure 6B). It appears that the 
Examiner has simply taken Ji's above mentioned limited use of file extensions, and has 
combined such limited use with Ji's teaching of renaming a file found to contain viruses, to meet 
appellant's claims. 

Appellant respectfully asserts that, even if such combination of teachings are taken into account, 
simply nowhere does Ji even suggest "converting the certain electronic file to a second file 
foimat having a second file extension that is different from the first file extension of the first file 
format" (emphasis added), as appellant specifically claims. In fact, Ji teaches that after "the file 
is renamed and stored in a specified directory. . .the user is notified of the new file name and 
directory path which can [be] used to manually request the file from the system administrator" 
(see Col. 9, lines 56-59). Clearly, such teaching does not even suggest that the file has been 
converted into a different format, in the manner specifically claimed by appellant- 
Appellant again reiterates that renaming a file, as in Ji, simply means giving the file a new name. 
Appellant, on the other hand, claims converting the file to a different file format and not merely 
giving the file anew name as taught in Ji. Specifically, nowhere in Ji is there any teaching of 
converting the file into a different format with a different extension (e.g. .TXT, etc.), as argued 
by the Examiner. Such extension, which is separate and different from a file name, is 
specifically indicative of a format thereof. 

In addition, appellant reiterates that Ji also fails to disclose converting the file into a different file 
format "that prevents the computer virus from executing when the converted electronic file is 
opened by the intended recipient." It seems the Examiner has simply inferred such a teaching 
from Ji's general disclosure of file formats that are not indicative of the file containing a virus. 
Again, the Examiner has failed to precisely show where appellant's specific language, when read 
in context, can be found. Appellant again respectfully asserts that such an inference is 
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unfounded. Specifically, in Ji, when a virus is found in a file, three options are provided, namely 
doing nothing and transferring the file, deleting the file without transferring it, or renaming the 
file and storing it (see Col. 9, lines 39-44 et aL). Thus, since Ji allows for a file to be transferred 
even after determining that the file is infected, etc. it is inappropriate to assume that renaming a 
file would inherently include converting the file into a different file format that specifically 
"prevents ttie computer virus from executing when the converted electronic file is opened by the 
intended recipient," as claimed by appellant. In other words, not only does Ji fail to meet 
appellant's claim language, it even teaches away from the same, as noted above. 

As argued in the Amendment filed 06/3/05, it seems that the Examiner has relied on Ji's 
disclosure of sending mail messages that have been treated to meet appellant's specific claim 
language. Appellant respectfully asserts that Ji's "treated message" is simply a message that 
contained a virus and that was cleaned (see Col. 17, lines 34-52 for example). Thus, Ji merely 
teaches sending a message after it has been cleaned of any virus infection, which clearly does not 
meet "converting the certain electronic file to a second file format having a second file extension 
that is different from the first file extension of the first file format and that prevents the computer 
virus from executing when the converted electronic file is opened by the intended recipient" in 
the manner claimed by appellant. Specifically, appellant claims changing the format of a file 
such that the virus contained in the file is prevented from executing, which clearly distinguishes 
the mere cleaning of the file as disclosed in Ji. It appears that the Examiner has simply failed to 
take into account the full weight of appellant's claims. 

Still with respect to independent Claims 1, 24, 28 and 36, the Examiner has relied on the 
following excerpt from Ji to make a prior art showing of appellant's claimed technique "wherein 
it is determined whether the certain electronic file represents at least a potential risk to security of 
a computer system, said converting the certain electronic file being in response to a 
determination that the certain electronic file represents at least the potential risk to the security of 
the computer system" (see this or similar, but not identical, language in each of the foregoing 
claims). 

"...the mail scanning apparatus may then take corrective action 1225 
regarding tha infected message, by either removing the virus, sensing a 
warning as part of the' message, deleting the message or forwarding the 
message to a system administrator." (Col. IB, lines 47-51) 
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In the Advisory Action dated 1/17/2006, the Examiner has failed to respond to appellant's 
specific arguments. Appellant again respectfully asserts that Ji does not teach appellant's 
specific claim language for substantially the same reasons as argued above. Specifically, simply 
nowhere does Ji specifically disclose converting the file format, in the manner claimed by 
appellant. 

As argued in the Amendment filed 06/3/05, appellant respectfully asserts that the corrective 
actions disclosed by Ji in the above cited excerpt relied on by the Examiner, including removing 
a virus, sending a warning with the message, deleting the message and forwarding the message, 
clearly fail to teach "converting the certain electronic file being in response to a determination 
that the certain electronic file represents the potential risk to the security of the computer 
system," as claimed by appellant. Specifically, appellant claims converting the file format, as 
described in the remaining claim language, whereas Ji merely cleans the infected file or leaves 
the file "as is." 

The Examiner is reminded that a claim is anticipated only if each and every element as set forth 
in the claim is found, either expressly or inherently described in a single prior art reference. 
Verdegaal Bros. v. Union Oil Co. Of California, 814 F.2d 628, 631, 2 USPQ2d 1051, 1053 (Fed. 
Cir. 1987). Moreover, the identical invention must be shown in as com plete detail as contained 
in the claim. Richardson v, Suzuki Motor C0.86& F.2d 1226, 1236, 9USPQ2d 1913, 1920 (Fed. 
Cir. 1989). The elements must be arranged as required bv the claim (emphasis added). 

This criterion has simply not been met by the Ji reference, for the reasons noted above. 

Group #2: Claim 7 

The Examiner has relied on Col. 12, lines 22-25 in Ji to make a prior art showing of appellant's 
claimed "converting occurring at a desktop computer of the intended recipient." Appellant 
respectfully asserts that such excerpt only discloses that "each of the encoded portions stored in 
its own file is individually decoded." Clearly, decoding encoded files does not even suggest 
"converting the certain electronic file to a second file format having a second file extension that 
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is different from the first file extension of the first file format and that preven ts the computer 
virus from executing when the converted electronic file is opened by the intended recipient" 
(emphasis added), as claimed. In additioa Ji expressly discloses that after the file is decoded, 
the file is checked for viruses and associated actions are taken, and then the transformed file is 
transmitted to the client (see Figure 8B and Col 12, lines 56-59). Thus, in Ji, the file cannot be 
converted "at a desktop computer of the intended recipient ," as appellant claims, since the file is 
transmitted after being decoded (emphasis added). 

Again, appellant respectfully asserts that the Ji reference fails to meet all of appellant's claim 
language, as noted above. 



Group #3: Claim 14 

The Examiner has relied on the following excerpts from Ji to make a prior art showing of 
appellant's claimed deceiving a second electronic file intended for delivery from another sender 
to another intended recipient, the second electronic file having a third file format and containing 
another computer virus; and prior to the second electronic file being made available for viewing 
by the another intended recipient, converting the second electronic file to a fourth file format that 
is different from the third file format and that prevents the another computer virus from 
executing when the converted second electronic file is opened by the another intended recipient" 

w The messages may contain simple text, graphics files or complex 
executable files which, as indicated, may carry viruses." (Col. 13, 
lines 22-23) 

w -.which may be of various types such as files generated by the 
electronic mail program 292 text editor, files generated by network 
application programs 2 96 such as word processing or spread sheet files , 
executable files, or any other object or item which may be 
conventionally attached to an electronic mail message or transferred to 
the client node 230 in an electronic mail system 200." (Col. 14, lines 
32-38) 

In the Advisory Action dated 1/17/2006, the Examiner has failed to respond to appellant's 
specific arguments. Thus, appellant substantially reiterates the arguments made in the 
Amendment dated 10/13/2005. 
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Specifically, in the Office Action dated 08/19/05, the Examiner has again relied on Ji's teaching 
of renaming a file (Col. 9, lines 1-44) to meet appellant's specific claim language. For 
substantially the same reasons as argued with respect to each of the independent claims above, 
appellant respectfully asserts that simply renaming a file does not meet "converting" in the 
context claimed by appellant. 

As argued in the Amendment filed 06/3/05, appellant respectfully asserts that the above excerpts 
from Ji merely teach the type of messages that may carry viruses and the types of attachments 
that may be attached to such messages. Clearly, the above excerpts do not even suggest any sort 
of preventing virus execution in an electronic file, let alone in the specific manner claimed by 
appellant. Furthermore, nowhere in Ji is there any mention of "converting the second electronic 
file to a fourth file format that is different from the third file format and that prevents the another 
computer virus from executing when the converted second electronic file is opened by the 
another intended recipient," in the context claimed by appellant (emphasis added). 

Again, appellant respectfully asserts that the Ji reference fails to meet aU of appellant's claim 
language, as noted above. 

Group #4: Claim 16 

The Examiner has relied on Ji's disclosure of ".txt, .bind, .pcx and .gif extension files" (Col. 8, 
line 67) and "encoding] binary data to ASCII data" (Col. 1 1, line 59) to make a prior art 
showing of appellant's claimed "second file format being at least one of a TXT file format, a 
RTF file format without embedded objects, a BMP file format, a JPEG file format, a CSV file 
format, a JPB file format, a GIF file format, a HTML file format without scripts, and a ASCII 
file format." 

Again, in the Advisory Action dated 1/17/2006, the Examiner has failed to respond to appellant's 
specific arguments. Thus, appellant substantially reiterates the arguments made in the 
Amendment dated 10/13/2005. 
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3h particular, in the Office Action dated 08/19/05, the Examiner has argued that the types of files 
claimed by appellant are mentioned in Ji (Col. 8, line 67, CoL 9, lines 1-2). However, appellant 
notes that such excerpts merely disclose types of files likely to contain viruses and types of files 
not likely to contain viruses. In Ji, if the file is of a type that is likely to contain a virus, then the 
file is temporarily stored and analyzed to determine if it has a virus (see Col. 9, lines 14-20). 
Thus, the file formats determined in Ji only relate to determining whether to further analyze a file 
for viruses, and not to actually converting the file format, in the specific context claimed by 
appellant. 

As argued in the Amendment filed 06/3/05, appellant respectfully asserts that simply disclosing 
types of files does rise to the level of specificity of appellant's claim language. In fact, the 
excerpts relied on by the Examiner are in the context of checking extensions of file names (CoL 
8, line 66) and scanning messages for portions that have been encoded using uuencode (CoL 11, 
line 58). Clearly, neither of these contexts meet appellant's specific claim language, since 
appellant claims converting a first file format to a second file format, where the second file 
format is "at least on of a TXT file format, a RTF file format without embedded objects, a BMP 
file format, a JPEG file format a CSV file format, a JPB file format, a GIF file format, a HTML 
file format without scripts, and a ASCII file format," as claimed. 

Again, appellant respectfully asserts that the Ji reference fails to meet aU of appellant's claim 
language, as noted above. 

Group #5; Claim 18 

The Examiner has relied on Jfs disclosure of '\txt, .bmd, ,pcx and .gif extension files" (CoL 8, 
line 67) and "encod[ing] binary data to ASCII data" (CoL 1 1, line 59) to make a prior art 
showing of appellant's claimed "second file format being the ACSII file format file/* Again, in 
the Advisory Action dated 1/17/2006, the Examiner has failed to respond to appellant's specific 
arguments. Thus, appellant substantially reiterates the arguments made in the Amendment dated 
10/13/2005. 
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In the Office Action dated 08/19/05, the Examiner has argued that the types of files claimed by 
appellant are mentioned in Ji (Col. 8, line 67, Col. 9, lines 1-2). However, appellant notes that 
such exceipte merely disclose types of files likely to contain viruses and types of files not likely 
to contain viruses. In Ji, if the file is of a type that is likely to contain a virus, then the file is 
tenlpofarily stored and analyzed to determine if it has a virus (see Col. 9, lines 14-20). Thus, the 
file formats determined in Ji only relate to detenniniftg whether to further analyze a file for 
viruses, and not to actually converting the file format, in the specific context claimed by 
appellant. 

As argued in the Amendment filed 06/3/05, appellant respectfully asserts that simply disclosing 
types of files does nse to the level of specificity of appellant's claim language. In fact, the 
exceipts relied on by the Examiner are in the context of checking extensions of file names (Col. 
8, line 66) and scanning messages for portions that have been encoded using uuencode (Col. 11, 
line 58)- Clearly, neither of these contexts meet appellant's specific claim language, since 
appellant claims converting a first file format to a second file format where "the second file 
format [is]. . . the ACSn file format file* 

Again, appellant respectfully asserts that the Ji reference fails to meet all of appellant's claim 
language, as noted above. 

Group #6: Claim 22 

The Examiner has relied on the following exceipts from Ji to make a prior art showing of 
appellant's claimed "determining if the first file format is one of a word processing file format 
type and a graphics file format type, the second file format being at least one of a TXT file 
format, a RTF file format without embedded objects, and a HTML file format without scripts if it 
is determined that the certain file format is the word processing file format type, the second file 
format being at least one of a JPB file format, a BMP file format, a GIF file format, a HTML file 
format Without scripts, and a JPEG file format if it is determined that the first file format is the 
graphics file format type." 
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^The analysis here is the same as step 618. in step 632, the output of 
the virus checking program is preferable echoed to the client task 72 
by the FTP proxy server..." (Col- 10, lines 30-33) 

«.„the £TP proxy server 60 and SMTP proxy server 62 are preferably only 
included or installed in the memory 44 of the gateway nodes 33." (Col. 
6, lines 50-53) 

Yet again, in the Advisory Action dated 1/17/2006, the Examiner has failed to respond to 
appellant's specific arguments. Thus, appellant substantially reiterates the arguments made in 
the Amendment dated 10/13/2005. 

In the Office Action dated 08/19/05, the Examiner has argued that the types of files claimed by 
appellant are mentioned in Ji. As ar gued with respect to the Amendment dated 06/3/05, 
appellant respectfully asserts that the above excerpts from Ji simply disclose an FTP proxy server 
that echoes the output of a virus checking program to a client task. Clearly, such a teaching has 
no relation to any sort of converting, in the manner claimed by appellant, and thus can in no way 
meet the same. 

Again, appellant respectfully asserts that the Ji reference fails to meet all of appellant's claim 
language, as noted above. 

Issue # 2: 

The Examiner has rejected Claims 15 and 34 under 35 U.S.C 103(a) as being unpatentable over Ji et 
al. (U.S. Patent No. 5,889,943), in view of Chen (U.S. Patent No. 5,960,170), 

Group #1: Claims 15 and 34 

Appellant respectfully asserts that the subject matter of such claims is deemed novel in view of the 
arguments made hereinabove. 

Issue #4: 
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The Examiner has rejected Claim 17 under 35 U.S.C 103(a) as being unpatentable over Ji et al. 
(U.S. Patent No. 5,889,943), in view of Chen (U.S. Patent No. 5,960,170), in further view of 
Moloney et al. (U.S. Patent No. 6,549,208). 

Group #1: Claim 17 . 

The Examiner has relied on Col 10, lines 35-40 in Maloney to make a prior art showing of 
appellant's claimed "second file format being the HTML file format without scripts." Appellant 
respectfully asserts that such excerpt only teaches a JPG or GIF image "is not displayable in the 
recorded format" and that the "graphic extraction tool converts the reassembled HTTP session 
file containing JPG and GIF data and creates a new log file containing the names and images." 
Thus, in &Ialoney 9 the HTTP session file itself is converted, which clearly does not meet 
appellant's "second file format being the HTML file format without scripts/' as claimed, when 
read in context. 

To establish a prima facie case of obviousness, three basic criteria must be met. First, there must 
be some suggestion or motivation, either in the references themselves or in the knowledge 
generally available to one of ordinary skill in the art, to modify the reference or to combine 
reference teachings. Second, there must be a reasonable expectation of success. Finally, the prior 
art reference (or references when combined) must teach or suggest all the claim limitations* The 
teaching or suggestion to make the claimed combination and the reasonable expectation of 
success must both be found in the prior art and not based on appellant's disclosure. In re 
Vaeck t 9Al R2d 488, 20 USPQ2d 1438 (Fed.Cir.1991). 

Appellant respectfully asserts that at least the third element of the prima facie case of 
obviousness has not been met, since the prior art references, when combined, fail to teach or 
suggest aU of the claim limitations, as noted above. 

In view of the remarks set forth hereinabove, all of the independent claims are deemed allowable, 
along with any claims depending therefrom. 
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Vin CLAIMS APPENDIX (37 C.F.TL § 4l.37(c)(l)(viii)) 

The text of the claims involved in the appeal (along with associated status information) is set forth 
below: 

1 . (Previously Presented) A method carried out by a computer when executing computer- 
readable program code, the method comprising: 

receiving a certain electronic file intended for delivery from a sender to an intended 
recipient, the certain electronic file having a first file format having a first file extension and 
containing a computer virus; and 

prior to the certain electronic file being made available for viewing by the intended 
recipient, converting the certain electronic file to a second file format having a second file 
extension that is different from the first file extension of the first file format and that prevents the 
computer virus from executing when the converted electronic file is opened by the intended 
recipient; 

wherein it is determined whether the certain electronic file represents at least a potential 
risk to security of a computer system, said converting the certain electronic file being in response 
to a determination that the certain electronic file represents at least the potential risk to the 
security of the computer system. 

2. (Original) The method of claim 1, the certain electronic file being an attachment to an 
electronic mail sent over a network. 

3 . (Original) The method of claim 2, the network including the internet. 

4. (Original) The method of claim 1, said receiving occurring at a desktop computer of the 
intended recipient 

5. (Original) The method of claim 1, said receiving occurring at a server computer. 

6. (Original) The method of claim 1 , said receiving occurring at a gateway computer. 
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7. (Original) The method of claim 1, said converting occurring at a desktop computer of the 
intended recipient. 

8- (Original) The method of claim 1, said converting occurring at a server computer. 

9. (Original) The method of claim 1, said converting occurring at a gateway computer. 

10. (Original) The method of claim 1, said converting occurring prior to the intended 
recipient receiving the certain electronic file. 

11. (Cancelled) 

12 (Previously Presented) The method of claim 1, said determining whether the certain 
electronic file represents the potential risk comprising: 

determining if the certain electronic file contains the computer virus. 

13. (Previously Presented) The method of claim 1, said determining whether the certain 
electronic file represents the potential risk comprising: 

conducting a heuristic scan of the certain electronic file. 

14. (Original) The method of claim 1, the certain electronic file being a first electronic file, 
further comprising: 

receiving a second electronic file intended for delivery from another sender to another 
intended recipient, the second electronic file having a third file format and containing another 
computer virus; and 

prior to the second electronic file being made available for viewing by the another 
intended recipient, converting the second electronic file to a fourth file format that is different 
from the third file format and that prevents the another computer virus from executing when the 
converted second electronic file is opened by the another intended recipient. 

15* (Original) The method of claim 1, the computer virus including a macro virus. 
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16. (Original) The method of claim 1, the second file format being at least one of a TXT file 
format, a RTF file format without embedded objects, a BMP file format, a JPEG file format, a 
CSV file format, a JPB file format, a GIF file format, a HTML file format without scripts, and a 
ASCII file format. 

1 7. (Original) The method of claim 1 6, the second file format being the HTML file format 
Without scripts. 

1 8. (Original) The method of claim 1 6, the second file format being the ACS1I file format 
file, 

19. (Original) The method of claim 16, the second file format being the TXT file format. 

20. (Original) The method of claim 1, the second file format being a file format having text 
without scripts. 

2 1 . (Original) The method of claim 1 , the certain electronic file being at least one of a word 
processing file, a spreadsheet file, a database file, a graphics file, a presentation file, a 
compressed file, and a binary executable file. 

22. (Original) The method of claim 1 , further comprising: 

determining if the first file format is one of a word processing file format type and a 
graphics file format type, the second file format being at least one of a TXT file format, a RTF 
file format without embedded objects, and a HTML file format without scripts if it is determined 
that the certain file format is the word processing file format type, the second file format being at 
least one of a JPB file format, a BMP file format, a GIF file format, a HTML file format without 
scripts, and a JPEG file format if it is determined that the first file format is the graphics file 
format type. 

23. (Original) The method of claim 1, the certain electronic file being an electronic file 
received by at least one of a RTP transfer or a HTTP transfer protocol. 
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24. (Previously Presented) A method for implementing a security policy, the method 
comprising: 

determining whether an electronic file represents at least a potential risk to security of a 
computer system; and 

prior to making the electronic file available to an intended recipient of the electronic file, 
converting the electronic file into a safe format having a safe file extension that ensures that a 
computer virus in the electronic file is unable to harm the computer system; 

said converting the electronic file being in response to the determination that the 
electronic file represents at least the potential risk to the security of the computer system. 

25. (Original) The method of 24, said determining comprising: 

determining whether the electronic file has a file extension indicative of a file type that 
supports a potential computer virus. 

26. (Original) The method of 24, said determining comprising: 
detecting whether the electronic file contains the computer virus. 

27. (Original) The method of 24, said determining comprising: 

determining whether content of the electronic file reflects a potential computer virus. 

28. (Previously Presented) A computer-readable medium having instructions stored thereon, 
the instructions when executed by a computer cause the computer to: 

convert a certain electronic file, intended for delivery from a sender to an intended 
recipient, from a first file format having a first file extension to a second file format having a 
second file extension, said converting being prior to the certain electronic file being made 
available for viewing by the intended recipient, the second file format with the second file 
extension being different from the first file format with the first file extension and preventing a 
computer virus in the certain electronic file from executing when the converted electronic file is 
opened by the intended recipient; 

wherein it is determined whether the certain electronic file represents at least a potential 
risk to security of a computer system, said converting the certain electronic file being in response 
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to a determination that the certain electronic file represents at least the potential risk to the 
security of the computer system. 

29. (Original) The computer-readable medium of claim 28, the certain electronic file being 
an attachment to an electronic mail sent over a network. 

30- (Original) The computer-readable medium of claim 28, the instructions when executed by 
the computer cause the computer to convert the certain electronic file from the first file format to 
the second file format prior to the intended recipient receiving the certain electronic file, 

31. (Cancelled) 

32. (Previously Presented) The computer-readable medium of claim 28 said determining 
Whether the certain electronic file represents the potential risk comprising: 

determining if the certain electronic file contains the computer virus. 

33. (Original) The computer-readable medium of claim 28 ? the instructions when executed by 
the computer further cause the computer to: 

determine if the first file format is one of a word processing format type and a graphics 
format type, the second file format being at least one of a TXT file format, a RTF file format 
without embedded objects, and a HTML file format without scripts if it is determined that the 
first file format is the word processing file format type, the second file format being at least one 
of a JPS file format, a BMP file format, a GIF file format, a HTML file format without scripts, 
and a JPEG file format if it is determined that the first file format is the graphics file format type. 

34. (Original) The computer-readable medium of claim 28, the computer virus being a macro 
virus. 

35, (Original) The computer-readable medium of claim 28, the second file format being at 
least one of a TXT file format, a RTF file format without embedded objects, a BMP file format, 
a JPEG file format, a CSV file format, a JPB file format, a GIF file format, a HTML file format 
without scripts, and a ASCII file format. 
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36. (Previously Presented) An apparatus comprising: 

a computer having means for receiving a certain electronic file intended for delivery from 
a sender to a intended recipient, the certain electronic file having a first file format having a first • 
file extension and containing a computer virus, the computer further including means for 
converting, prior to the certain electronic file being made available for viewing by the intended 
recipient, the certain electronic file from the first file format with the first file extension to a 
second file format having a second file extension that is different from the first file format with 
the first file extension and that prevents the computer virus from executing when the converted 
electronic file is opened by the intended recipient; 

wherein it is determined whether the certain electronic file represents at least a potential 
risk to security of a computer system, said converting the certain electronic file being in 
response to a determination that the certain electronic file represents at least the potential risk to 
the security of the computer system. 

37. (Original) The apparatus of claim 36, said computer being a desktop computer of the 
intended recipient. 

38. (Original) The apparatus of claim 36, said computer being a server computer of a local 
area network. 

39. (Original) The apparatus of claim 36, said computer being a gateway computer. 

40. (Previously Presented) The method as recited in claim 1 , wherein the first format is 
selected from the group consisting of: a word processing file, a spreadsheet file, a database file, 
a graphics file, a presentation file, a compressed file, and a binary executable file; and is 
converted to the second format which is selected from the group consisting of a TXT file 
format, a RTF file format without embedded objects, a BMP file format, a JPEG file format, a 
CSV file format, a JPB file format, a GIF file fonnat, a HTML file format without scripts, and a 
ASCII file fonnat. 
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IX EVIDENCE APPENDIX (37 C.FJL § 41. 37(c)(1) (is)) 
There is no such evidence. 
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X RELATED PROCEEDING APPENDIX (37 C.F.R. § 41.37(c)(lXx)) 

Since no decisions) has been rendered in such proceeding^), no material is included in this Related 
Proceedings Appendix. 
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In the event a telephone conversation would expedite the prosecution of this application, the 
Examiner may reach the undersigned at (408) 971-2573. For payment of any additional fees due in 
connection with the filing of this paper, the Commissioner is authorized to charge such fees to 
Deposit Account No. 50-1351 (Order No. NAI1P092/0 1.050.01). 




Facsimile: (408)971-4660 
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claims involved in the appeal, referring to the specification by page and line number and to the drawings, if any, 
by reference characters; and/or (b) the brief faBs to: (1) identify, for each Independent claim involved in the 
appeal and for each dependent claim argued separately, every means plus function and step plus function under 
35 U.S.C. 112, sixth paragraph, and/or (2) set forth the structure, material or acts described in the specification 
as corresponding to each claimed function with reference to the specification by page and One number, and to 
the drawings, if any. by reference characters (37 CFR 41.37(c)(1)(v)). 

5. □ The brief does not contain a concise statement of each ground of rejection presented for review (37 CFR 

4l37(c)(1)(vi)) 

6 □ The brief does not present an argument under a separate heading for each ground of rejection on appeal (37 CFR 
41.37(oK1MvB». 

7. □ The brief does not contain a correct copy of the appeared claims as an appendix thereto (37 CFR 
41-37(c)[1)(vfil)). 

a. □ The brief does not contain copies of the evidence submitted under 37 CFR 1.130, 1 .131, or 1.132 or of any 
other evidence entered by the examiner and relied upon by appellant in the appeal, along with a 
statement setting forth where ir> the record that evidence was entered by the examiner, as an appendix 
thereto (37 CFR 41.37(c)(1)(ix)). 

9. □ The brief does not contain copies of the decisions rendered by a court or the Board In the proceeding 
identified in the Related Appeals and Interferences section of the brief as an appendix thereto (37 CFR 
41.37(c)(1)(x)). 

1 0.S Other {including any explanation in support of the above items): 

< f. The delmed invention is not seceratetv mapped to independent cla ims 1 . 24. 28. & 38. which should refer to the 
jpecgfeaflon bv oaaR and line numbers oroar aamoh numbers & to drawings , if any. 
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